Windows 10: new pc but provisioned by Azure Active Directory after Windows update

Bought a brand new personal use dell notebook with windows 11 home but after windows update to latest version, computer was provisioned and registered ith azure active directory and azure iot device hub. New unknown adminstrator account blocked my access to microsoft built in apps including windows defender firewall and notepads, edge browser etc. Unable to remove the other unknown administrator account because does not have permission but my local account was initialized as only user account and only adminstrator account.Microsoft consumer support was not able to deregister or deprovision the

:)

 

Windows 10 and Azure Active Directory: Embracing the Cloud

Source: http://blogs.windows.com/business/20...ing-the-cloud/

 

Workday to On-Prem Active Directory: Issue with Multi-valued attributes syncing from Workday through Azure to On-prem AD via SCIM

Hello there,

We have been using Workday to synchronise User accounts through Azure to our On-Prem Active Directory. For about 4-6 weeks we have been facing the issue now that Multi-valued attributes are no longer written correctly to the on-prem AD which was working before. This specifically effects the Assigned Provisioning Group from Workday using xpath: wd:Worker/wd:Worker_Data/wd:Account_Provisioning_Data/wdrovisioning_Group_Assignment_Data[wd:Status='Assigned']/wdrovisioning_Group/text()

We are currently seeing the following behaviour:

1. An Employee in Workday has Provisioning groups A, B and C assigned = A, B and C are synchronised to Active Directory into a Multi-valued attribute
   
2. The same Employee in Workday is updated and now has Provisioning groups A, B, C and D assigned
   
3. The provisioning in Azure now evaluates the diff between whats in AD and Whats in Azure and evaluates that D is a new value and was appended to the attribute
   
4. The provisioning now overwrites the entire attribute in AD with the value of group "D"
   
5. Once the provisioning runs again it evaluates the diff to be A, B and C as appended values and replaces the value D with A, B, C in AD.
   
6. These steps repeat continuously writing A,BC then D then A,B,C again and so on
   

Checking the provisioning agent that pushes the Workday data from Azure to the on-prem AD, you can see the following verbose outputs: (SCIM operation is Replace and not Add)

Sync 1:

{'schemas':['urn:ietfarams:scim:api:messages:2.0:BulkRequest'],'Operations':[{'method':'PATCH','bulkId':'f2be78c1-177a-4f90-b5c8-61b7f3cdb576','path':'/DynamicElements/1f56ed3b-cafd-40b0-ab44-5b3a7bcc2bc6','data':[{'op':'Replace','path':'destinationIndicator','value':[{'value':'All_COO_Org_Managers_CELOCORE_AUTO'},{'value':'All_GTM_Org_CELOCORE_AUTO'}]}]}],'failOnErrors':null}

Sync 2:

{'schemas':['urn:ietfarams:scim:api:messages:2.0:BulkRequest'],'Operations':[{'method':'PATCH','bulkId':'858895c7-7e06-4b8a-866d-d3649482e7d5','path':'/DynamicElements/1f56ed3b-cafd-40b0-ab44-5b3a7bcc2bc6','data':[{'op':'Replace','path':'destinationIndicator','value':[{'value':'All_Celonis_CELOCORE_AUTO'}]}]}],'failOnErrors':null}

Sync 3:

{'schemas':['urn:ietfarams:scim:api:messages:2.0:BulkRequest'],'Operations':[{'method':'PATCH','bulkId':'f2be78c1-177a-4f90-b5c8-61b7f3cdb576','path':'/DynamicElements/1f56ed3b-cafd-40b0-ab44-5b3a7bcc2bc6','data':[{'op':'Replace','path':'destinationIndicator','value':[{'value':'All_COO_Org_Managers_CELOCORE_AUTO'},{'value':'All_GTM_Org_CELOCORE_AUTO'}]}]}],'failOnErrors':null}



Has anyone else faced this issue and has a solution at hand on how this could be resolved?

Any help is much appreciated as our Microsoft support has already declared this as 3rd party and asked us to reach out to Workday as this is not within the support of them.



Many thanks and best regards

Timo

 

Mailbox migrations and Azure / Active Directory

Quick question or observation, we are in the middle of performing office mailbox migrations to the cloud. During this time I have noticed Active Directory accounts randomly locking out. Whether it be after a reboot, outlook, skype all of the sudden prompting
for passwords. Not sure if there is a correlation between Azure / Active Directory.

Or it could all be just a coincidence.

Thank you